1620 matches found
Oracle WebCenter Sites Satellite Server - HTTP Header Injection
Oracle WebCenter Sites Satellite Server - HTTP Header Injection SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: HTTP header injection/Cache poisoning in Oracle WebCenter Sites Satellite Server product: Oracle WebCenter...
Nitro Pro 8 Insecure Library Loading
SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Nitro Pro 8 - Insecure Library Loading Allows Remote Code Execution DLL Hijacking product: Nitro Pro vulnerable version: 8.5.0.26; older versions may also be affected fix...
Sophos Web Protection Appliance 3.7.8.1 XSS / Command Execution
SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple vulnerabilities product: Sophos Web Protection Appliance vulnerable version: = 3.7.8.1 fixed version: 3.7.8.2 impact: Critical CVE number: CVE-2013-2641,...
Aspen 0.8 - Directory Traversal
Aspen 0.8 - Directory Traversal Aspen 0.8 - Directory Traversal Earlier versions are also possibly vulnerable. INFORMATION Product: Aspen 0.8 Remote-exploit: yes Vendor-URL: http://www.zetadev.com/software/aspen/ Discovered by: Daniel Ricardo dos Santos CVE Request - 15/03/2013 CVE Assign -...
Aspen 0.8 - Directory Traversal
Aspen 0.8 - Directory Traversal Earlier versions are also possibly vulnerable. INFORMATION Product: Aspen 0.8 Remote-exploit: yes Vendor-URL: http://www.zetadev.com/software/aspen/ Discovered by: Daniel Ricardo dos Santos CVE Request - 15/03/2013 CVE Assign - 18/03/2013 CVE Number - CVE-2013-2619...
Aspen 0.8 Directory Traversal
Aspen 0.8 - Directory Traversal Earlier versions are also possibly vulnerable. INFORMATION Product: Aspen 0.8 Remote-exploit: yes Vendor-URL: http://www.zetadev.com/software/aspen/ Discovered by: Daniel Ricardo dos Santos CVE Request - 15/03/2013 CVE Assign - 18/03/2013 CVE Number - CVE-2013-2619...
SEC Consult SA-20130308-1 :: Multiple vulnerabilities in GroundWork Monitor Enterprise (part 2)
SEC Consult Vulnerability Lab Security Advisory 20130308-1 ======================================================================= title: Multiple high risk vulnerabilities part 2 product: GroundWork Monitor Enterprise vulnerable version: 6.7.0 fixed version: none - optional technical bulletin...
On a recent Pike background vulnerability description-vulnerability warning-the black bar safety net
SEC Consult,an Austrian security research company, recently released a report on the Barracuda back-office support system to the presence of the vulnerability report. In their assistance, we have taken various measures to fix these loopholes. We provide all this security warning relates to a devi...
SOL14138 - XML External Entity Injection (XXE) from authenticated source vulnerability CVE-2012-2997
Vulnerability Recommended Actions To eliminate this vulnerability, upgrade to a version that is listed in the Versions known to be not vulnerable column. Acknowledgements F5 would like to acknowledge SEC Consult Vulnerability Lab for bringing this issue to our attention, and for following the...
Anonymous Hackers leaks video of Steubenville rape case
Two high school football players in Steubenville, Ohio are under arrest for the sexual assault of a 16-year-old girl. Newly leaked video sheds more light on what may have happened to a girl who told police she was raped by these high school football players in August. Trent Mays and Ma'lik...
Joomla! Component Spider Calendar - 'date' Blind SQL Injection
Happy New year for all 3 Merry x-mas ! +===================================================================================+ ? Note : No One stay for a one : ! ============================================================================== ? Joomla Component comspidercalendar Blind SQL Injection...
Joomla Component com_spidercalendar Blind SQL Injection Vulnerability
Exploit for php platform in category web applications Happy New year for all 3 Merry x-mas ! +===================================================================================+ ? Note : No One stay for a one : ! ============================================================================== ?...
Joomla! Component Spider Calendar - date Blind SQL Injection
Joomla! Component Spider Calendar - date Blind SQL Injection Happy New year for all 3 Merry x-mas ! +===================================================================================+ ? Note : No One stay for a one : ! ============================================================================...
Wireshark iSCSI解析器无限循环漏洞
CVECAN ID: CVE-2012-6060 Wireshark（前称Ethereal）是一款非常流行的开源网络流量分析软件。 Wireshark 1.6.0-1.6.11、1.8.0-1.8.3在iSCSI解析器的实现上存在安全漏洞，通过诱使受害者读取恶意报文，导致消耗大量CPU资源，iSCSI解析器进入无限循环。 0 Wireshark 1.x 厂商补丁： Wireshark --------- Wireshark已经为此发布了一个安全公告（wnpa-sec-2012-36）以及相应补丁: wnpa-sec-2012-36：Wireshark iSCSI dissector...
FirePass SSL VPN Unauthenticated Local File Inclusion Vulnerability
Exploit for multiple platform in category web applications ======================================================================= title: Unauthenticated local file inclusion product: F5 FirePass SSL VPN vulnerable version: = 7.0.0 HF-70-6 fixed version: 7.0.0 HF-70-7 impact: Critical homepage:...
SOL14046 - FirePass input validation vulnerability
Vulnerability Recommended Actions To eliminate this vulnerability, upgrade to a version that is listed in the Versions known to be not vulnerable column in the previous table. F5 strongly recommends that you install HF-70-7 for FirePass 7.0.0 to address this vulnerability. Acknowledgements F5 wou...
Report Details Coca-Cola Cyber Attack That Never was Disclosed
In an exclusive report, Bloomberg News outlines a month-long, systematic attack on Cola-Cola’s computer systems that may have influenced the failed $2.4 billion acquisition of a Chinese juice company. The FBI knew about it. Coca-Cola knew about it. But shareholders were kept in the dark. The Coke...
Unirgy uStoreLocator Magento Extension SQL Injection
SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: SQL Injection product: Unirgy uStoreLocator - Magento extension vulnerable version: =2.0.1 impact: High homepage: http://www.unirgy.com/ found: 2012-06-18 by: K...
MIRcon 2012: Overall Themes for the Management Track
Mandiant will host its third annual MIRcon on October 17th and 18th in Washington, DC. I attended the previous two MIRcon conferences, first as Director of Incident Response for my previous employer, and last year as Mandiant's Chief Security Officer. Last year we decided to host both a technical...
7 Sepher SQL Injection
Exploit Title : 7sepehr SQL Injection Vulnerability Author : Tapco Security & Research Lab Discovered By : K0242 Home : sec-lab.ir Contact : research at sec-lab dot ir Portal Link : www.7sepehr.Com Security Risk : High DorK : "Powered by 7sepehr.com" Expl0iTs: www.target.com/contents.aspx?id=sqli...